Critical section inside an ISR

Inside an ISR, FreeRTOS code must protect a shared structure. Which pattern is correct?

UBaseType_t s = taskENTER_CRITICAL_FROM_ISR();
update_shared();
taskEXIT_CRITICAL_FROM_ISR(s);